The real cost of software errors

IEEE Security and Privacy

Volumn 7, Issue 2, 2009, Pages 87-90

  Zhivich, Michael ^a   Cunningham, Robert K ^a  

^a MIT LINCOLN LABORATORY   (United States)

Author keywords

Cost; Risks; Secure systems; Software errors; Software failures

Indexed keywords

COMPUTER MALWARE; CRITICAL INFRASTRUCTURE SYSTEMS; CRITICAL SYSTEMS; NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGIES; OIL-AND-GAS PIPELINES; POWER GRIDS; REAL COSTS; SECURE SYSTEMS; SOFTWARE ERRORS; SOFTWARE FAILURES; SOFTWARE PATCHES; US ECONOMIES; VIRUS ATTACKS;

CHEMICALS REMOVAL (WATER TREATMENT); COMPUTER CRIME; COSTS; DISTILLATION; ERRORS; GAS PIPELINES; GAS PLANTS; PETROLEUM REFINERIES; PIPELINES; POWER GENERATION; SECURITY OF DATA; STANDARDIZATION;

COST BENEFIT ANALYSIS;

EID: 65249116275     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2009.56     Document Type: Article

References (6)

1. US-Canada Power System Outage Task Force, Final Report on the August 14, 2003 Blackout in the United States and Canada: Causes and Recommendationś, tech. report, US Dept. of Energy, Apr. 2004.
2. G. Williamson, "Software Safety and Reliability," IEEE Potentials, vol. 16, no. 4, 1997, pp. 32-36.
3. R. Lippmanm, M. Zitser, and T. Leek, "Testing Static Analysis Tools using Exploitable Buffer Overflows from Open Source Code," ACM SIGSOFT Software Eng. Notes, vol. 29, no. 6, 2004, pp. 97-106.
4. T. Leek, M. Zhivich, and R. Lipp-mann, "Dynamic Buffer Overflow Detection," Proc. Workshop Evaluation of Software Defect Detection Tools, 2005; www.cs.umd. edu/-pugh/BugWorkshop05/ papers/61-zhivich.pdf.
5. M. Zhivich, Detecting Buffer Overflows using Testcase Synthesis and Code Instrumentation, master's thesis, Dept. of Electrical Eng. and Computer Science, Massachusetts Inst. of Tech., May 2005.
6. G. McGraw, "Software [In]Secu-rity: Software Security Demand Rising," InformIT, 11 Aug. 2008; www.informit.com/articles/ article.aspx?p=1237978.